Group Policy - Defining Security Policies Using Variables?

From: Jason Cook (JasonCook_at_discussions.microsoft.com)
Date: 10/28/04


Date: Thu, 28 Oct 2004 07:47:08 -0700

Problem:
When setting up a new GPO, is there a method for using variables such as
%computername%\LocalServiceAccount when defining security permissions such as
“Deny log on locally”

Background:
I'm monitoring hundreds of local server accounts with common names and
adminstrative access. These accounts run services and applications but do
not need console access. I need to find an effective method for setting the
permission "Deny Logon Locally."